Cyber Liability Insurance

Cyber liability covers the cost of a data breach or cyberattack on your off-chain infrastructure — first-party recovery costs and third-party liability to clients and users whose data was exposed. Essential alongside on-chain coverage.

Cyber Liability for Crypto & Web3 Firms

Not every crypto loss happens on-chain. Exchanges, custodians, and protocols run substantial off-chain infrastructure — KYC/AML databases, user PII, admin systems, cloud environments, and front-end applications — and all of it is a target. Cyber liability responds to breaches and attacks on that infrastructure, covering both sides of the loss.

First-party coverage pays your own costs after an incident: forensic investigation, breach notification, ransomware / extortion response, public relations, and business interruption. Third-party coverage pays your liability to others — lawsuits from users or clients whose data was exposed, and regulatory defense and fines under privacy laws like GDPR and CCPA.

Why Web3 Companies Are Prime Targets

Crypto firms hold exactly what attackers want — credentials, customer data, and the keys to valuable systems — which makes them among the most targeted businesses online. A phishing attack on an employee or a compromised admin panel can lead to both a data breach and an asset theft. We coordinate cyber with crime/custody and tech E&O so an attack that crosses from infrastructure into asset loss is covered end to end, not split across gaps.

What's Covered

Data breach response & notification

Ransomware & cyber-extortion

Third-party privacy liability

Regulatory fines & defense (GDPR/CCPA)

Forensics, PR & data restoration

Cyber business interruption

Frequently Asked Questions

Isn't cyber the same as my smart-contract or crime coverage?

No — they address different exposures. Cyber covers attacks on your off-chain IT infrastructure and data (breaches, ransomware, PII). Smart-contract liability covers on-chain exploits, and crime/custody covers asset theft. Most web3 firms need all three working together.

Do we need cyber coverage if most of our stack is on-chain?

Yes. Even on-chain-heavy teams run off-chain front ends, databases, KYC systems, and admin tooling that hold user data and credentials. Those are frequent attack vectors, and clients and regulators increasingly require cyber coverage regardless of how much runs on-chain.